Revision history [back]

Well, finally the answer is simple. tcp[13] & 4 == 4 is a capture filter but I tried to use it as a display filter... it would never work. Hopefully i'll get used to Wireshark...